GRC Compliance Analyst, Information Security

ENCOMPASS DIGITAL MEDIA LLC•Atlanta, GA

1d•Remote

About The Position

GRC Compliance Analyst, Information Security Encompass is a global technology services company focused on supporting broadcast, cable and digital leaders. We design, implement and operate reliable video solutions that capture, process and deliver our clients’ video content from any source, in any format, to any destination in the most efficient manner possible.

Requirements

3-5 years’ experience in broadcast media industry.
Experience in establishing information security risk management, governance and compliance frameworks across different regions and business units.
Demonstrate experience in designing/evaluating controls associated with business processes in a complex operational, IT, regulatory and global environment.

Nice To Haves

Experience working in audit, risk and compliance
SOC 2 Type auditing
ISO 27001 certification achievement
Excellent interpersonal and collaboration skills, team player, approachable, professionally mature, relationship management and consulting skills.
Ability to work in multicultural and multi-geographical environment
Ability to work autonomously or as part of a team, within targets and deadlines
Strong analytical and data interpretation skills including the ability to review, interpret and present data in a concise and precise manner
Degree in information security, information technology or related discipline.
Advanced Microsoft Office skills, particularly Excel, Visio, and PowerPoint.
Fluent Spanish speaking

Responsibilities

Proactively engage with all business areas to ensure compliance processes, tools and IT Systems are appropriately embedded into business operations.
Help develop, support and maintain a robust risk framework to monitor and report on the effectiveness of compliance controls across all functions and compliance areas.
Manage, maintain and improve on the compliance of Internal Controls to meet internal and external compliance SOC2 and ISO related Security requirements.
Participate in the planning and scoping activities, interface with business units in gaining an understanding of their risk environment, facilitating walkthroughs designed to gain an understanding of the business process, refine process flows, and update risk and control registers.
Execute all phases of the control environment validation activities. Perform analysis and provide an assessment on the effectiveness and design of the control environment and first line of defense program.
Interface with the business throughout and consult on needed remediation. Establish and maintain an open dialogue with the business and management to stay abreast of changing and emerging risks.
Perform analysis, prepare and present reports to business and control owner on the effectiveness of their control environment along with recommendations to improve the design or operating effectiveness, or efficiency of a control or process.
Monitor remediation actions, track and report completion, perform validation as appropriate, inform relevant parties, and update control registers.
Document, modify and publish company information security policies and standard operating procedures.
Maintain a strong knowledge of overall business issues and objectives, understand company structure and functional responsibility.